Strategic Enterprise Security Leader

Avenue5; Phoenix (AZ); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Avenue5 is seeking an Enterprise Security Manager to lead cybersecurity and physical access programs across its offices nationwide. The role partners with IT, legal, HR, finance and operations to ensure secure, compliant systems and data protection.

You will drive risk assessments, incident response, vulnerability management, IAM, and data privacy while coordinating audits, regulatory requirements, and security reviews with internal and external stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field.
• 5+ years in information security and 2+ years leading security programs.
• Experience with incident response, vulnerability management, IAM/MFA and audit coordination.
• Experience with Microsoft 365/Azure AD (Entra ID), endpoint protection, SIEM, firewalls and cloud security.

Responsibilities

• Lead cybersecurity risk assessments and governance aligned to frameworks (NIST CSF, CIS Controls, ISO 27001).
• Plan and coordinate internal/external audits, attestations, and security reviews.
• Own incident response playbooks, investigations, containment and recovery.
• Oversee vulnerability management, patching and risk remediation across environments.
• Manage physical and cloud access security, MFA, SSO and privileged access reviews.
• Evaluate supplier security and data protection in third-party contracts.

Skills

Security governance

Incident response

Vulnerability management

IAM / MFA

Data privacy

Physical access

Security audits

PCI DSS

Education

Bachelor's degree in Cybersecurity/IT or related field

CISSP/CISM/CISA or similar

Tools

Microsoft 365/Azure AD

EDR

SIEM

Firewalls

Job description

Avenue5 is seeking an Enterprise Security Manager to lead cybersecurity and physical access programs across its offices nationwide. The role partners with IT, legal, HR, finance and operations to ensure secure, compliant systems and data protection.

You will drive risk assessments, incident response, vulnerability management, IAM, and data privacy while coordinating audits, regulatory requirements, and security reviews with internal and external stakeholders.